$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b7b5c4d7-478e-3c93-8e2c-6fc7a39fea76.roa File: b7b5c4d7-478e-3c93-8e2c-6fc7a39fea76.roa (raw, json) Hash identifier: Dl1e9eJN9rf5cSnY5pRRlTCBWbffp5mwFADl4kQBQH0= Subject key identifier: A9:F8:9E:8C:89:35:71:6F:D7:C2:FB:E9:D1:5B:23:80:50:A4:35:F5 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584D5DFF45F32F1FB55889101140 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b7b5c4d7-478e-3c93-8e2c-6fc7a39fea76.roa Signing time: Thu 02 Apr 2026 00:06:06 +0000 ROA not before: Thu 02 Apr 2026 00:06:06 +0000 ROA not after: Wed 01 Jul 2026 00:06:06 +0000 asID: 397373 IP address blocks: 216.158.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:ff:45:f3:2f:1f:b5:58:89:10:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Apr 2 00:06:06 2026 GMT Not After : Jul 1 00:06:06 2026 GMT Subject: CN=7e47a0ab-f9bb-4350-82f5-9501bc419d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:97:33:05:dc:1c:3b:c4:22:b9:fa:b4:25: 85:51:dd:54:51:a9:c3:cc:a2:ff:1e:c4:a5:b6:00: 98:d9:a4:10:f3:8c:8c:ed:ef:00:92:9e:b1:8e:6e: df:dd:61:16:4e:6d:06:e3:5a:57:3f:5d:79:2d:ea: 82:5a:51:b8:cf:b9:b7:22:70:64:3b:28:43:11:14: 1a:ad:db:cc:39:83:25:ba:3c:08:d8:0a:5c:59:d5: 7b:83:9d:ba:28:4b:7b:8f:02:51:74:5a:54:a0:66: 99:0d:7e:42:5c:ce:34:05:f3:37:e6:e7:87:3f:64: 25:46:03:25:15:86:96:02:4d:bf:38:51:3c:df:a6: 98:55:55:fa:60:fa:d9:20:15:3e:48:f3:50:b2:07: dd:a6:d5:e5:0c:f2:b0:a7:d3:35:10:da:11:fb:00: 26:08:e5:0d:a0:cb:18:6a:62:f3:82:84:b6:5c:d2: 46:f4:71:10:7a:ef:cc:0f:7d:3b:9d:d0:9f:72:0a: 03:24:6d:d2:ae:24:56:b0:68:68:3c:18:0c:53:cd: ce:c1:c8:94:84:d2:69:1d:31:9f:4b:ef:f0:23:2b: 1d:31:5c:1e:01:f1:3b:e3:7b:77:e4:0a:42:73:c2: 33:40:17:f2:09:9c:a9:e6:7a:3a:ca:65:3c:ff:01: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F8:9E:8C:89:35:71:6F:D7:C2:FB:E9:D1:5B:23:80:50:A4:35:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b7b5c4d7-478e-3c93-8e2c-6fc7a39fea76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:39:1d:50:64:27:44:b9:3c:cb:20:6a:be:d8:cd:66:3f:2e: f9:ad:9e:b2:66:8e:f0:db:2c:21:48:cb:33:73:80:79:c5:cd: 2c:54:00:af:7e:67:00:c2:dc:a8:20:f8:8e:a8:15:64:cc:88: 36:57:3d:1a:fc:05:b5:20:ba:88:8d:46:ba:5a:87:c6:95:ea: ae:17:ed:da:5c:a7:38:f9:81:89:2f:65:99:31:26:84:9e:b6: 97:2d:eb:bc:58:e6:cf:f0:18:f5:7d:71:70:9e:cf:46:cb:c1: 48:30:f6:8d:8d:e4:08:61:8b:70:ee:66:7e:88:4f:77:d5:7f: 90:f1:b7:b7:da:86:45:8c:36:43:10:59:44:cf:bc:02:7b:83: 82:f1:12:58:04:59:08:76:a3:65:5a:12:9d:f7:82:b2:2f:b6: 68:36:be:ec:60:ab:6b:2d:4f:6e:7b:30:dc:a0:75:bc:d1:e2: b9:52:3c:0b:ae:1d:f8:6f:99:0a:35:a0:41:02:de:65:f3:d0: 1a:34:8a:22:dd:54:02:2f:e0:4c:40:4e:ad:94:96:03:d5:b3: 20:68:e4:a7:68:9c:12:cf:09:d9:7f:45:92:b5:f0:2e:b7:a0: ba:22:61:01:50:8a:30:02:ef:06:c7:96:3f:db:bc:a5:98:5f: d6:1f:1b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1d/0XzLx+1WIkQEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDQwMjAwMDYwNloXDTI2MDcwMTAwMDYwNlowLzEtMCsGA1UEAxMk N2U0N2EwYWItZjliYi00MzUwLTgyZjUtOTUwMWJjNDE5ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtCXMwXcHDvEIrn6tCWFUd1UUanDzKL/HsSl tgCY2aQQ84yM7e8Akp6xjm7f3WEWTm0G41pXP115LeqCWlG4z7m3InBkOyhDERQa rdvMOYMlujwI2ApcWdV7g526KEt7jwJRdFpUoGaZDX5CXM40BfM35ueHP2QlRgMl FYaWAk2/OFE836aYVVX6YPrZIBU+SPNQsgfdptXlDPKwp9M1ENoR+wAmCOUNoMsY amLzgoS2XNJG9HEQeu/MD307ndCfcgoDJG3SriRWsGhoPBgMU83OwciUhNJpHTGf S+/wIysdMVweAfE743t35ApCc8IzQBfyCZyp5no6ymU8/wFZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn4noyJNXFv18L76dFbI4BQpDX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvYjdiNWM0ZDctNDc4ZS0z YzkzLThlMmMtNmZjN2EzOWZlYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg5HVBkJ0S5PMsgar7YzWY/LvmtnrJmjvDbLCFIyzNzgHnFzSxUAK9+ ZwDC3Kgg+I6oFWTMiDZXPRr8BbUguoiNRrpah8aV6q4X7dpcpzj5gYkvZZkxJoSe tpct67xY5s/wGPV9cXCez0bLwUgw9o2N5Ahhi3DuZn6IT3fVf5Dxt7fahkWMNkMQ WUTPvAJ7g4LxElgEWQh2o2VaEp33grIvtmg2vuxgq2stT257MNygdbzR4rlSPAuu HfhvmQo1oEEC3mXz0Bo0iiLdVAIv4ExATq2UlgPVsyBo5KdonBLPCdl/RZK18C63 oLoiYQFQijAC7wbHlj/bvKWYX9YfG2M= -----END CERTIFICATE-----Generated at Fri Apr 17 13:45:45 2026 by rpki-client